HEAT Reporting Services 8.4 Install Guide. April 29, 2016

HEAT Reporting Services 8.4 Install Guide April 29, 2016

Chapter 0: Title Page Notices Copyright Information Lumension Security Inc., 8660 East Hartford Drive, Suite 300 Scottsdale, AZ 85255 Phone: +1 888.725.7828 Fax: +1 480.970.6323 E-mail: info@lumension.com Copyright 1999-2016; Lumension Security, Inc.; all rights reserved. Covered by one or more of U.S. Patent Nos. 6,990,660, 7,278,158, 7,487,495, 7,823,147, 7,870,606, and/or 7,894,514; other patents pending. This manual, as well as the software described in it, is furnished under license. No part of this manual may be reproduced, stored in a retrieval system, or transmitted in any form electronic, mechanical, recording, or otherwise except as permitted by such license. LIMITATION OF LIABILITY/DISCLAIMER OF WARRANTY: LUMENSION SECURITY, INC. (LUMENSION) MAKES NO REPRESENTATIONS OR WARRANTIES WITH REGARD TO THE ACCURACY OR COMPLETENESS OF THE INFORMATION PROVIDED IN THIS MANUAL. LUMENSION RESERVES THE RIGHT TO MAKE CHANGES TO THE INFORMATION DESCRIBED IN THIS MANUAL AT ANY TIME WITHOUT NOTICE AND WITHOUT OBLIGATION TO NOTIFY ANY PERSON OF SUCH CHANGES. THE INFORMATION PROVIDED IN THIS MANUAL IS PROVIDED AS IS AND WITHOUT WARRANTY OF ANY KIND, INCLUDING WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE INFORMATION PROVIDED IN THIS MANUAL IS NOT GUARANTEED OR WARRANTED TO PRODUCE ANY PARTICULAR RESULT, AND THE ADVICE AND STRATEGIES CONTAINED MAY NOT BE SUITABLE FOR EVERY ORGANIZATION. NO WARRANTY MAY BE CREATED OR EXTENDED WITH RESPECT TO THIS MANUAL BY SALES REPRESENTATIVES OR WRITTEN SALES MATERIALS. LUMENSION SHALL NOT BE LIABLE TO ANY PERSON WHATSOEVER FOR ANY LOSS OF PROFIT OR DATA OR ANY OTHER DAMAGES ARISING FROM THE USE OF THIS MANUAL, INCLUDING BUT NOT LIMITED TO DIRECT, INDIRECT, SPECIAL, INCIDENTAL, CONSEQUENTIAL, OR OTHER DAMAGES. 2

Trademark Information Lumension, Lumension Endpoint Management and Security Suite, Lumension Endpoint Management Platform, Lumension Patch and Remediation, Lumension Enterprise Reporting, Lumension Security Configuration Management, Lumension Content Wizard, Lumension AntiVirus, Lumension Wake on LAN, Lumension Power Management, Lumension Application Control, Lumension Device Control, Lumension Endpoint Security, Lumension Intelligent Whitelisting, PatchLink, PatchLink Update, their associated logos, and all other Lumension trademarks and trade names used here are the property of Lumension Security, Inc. or its affiliates in the U.S. and other countries. RSA Secured is a registered trademark of RSA Security Inc. Apache is a trademark of the Apache Software Foundation. In addition, any other companies' names, trade names, trademarks, and products mentioned in this document may be either registered trademarks or trademarks of their respective owners. Feedback Your feedback lets us know if we are meeting your documentation needs. E-mail the HEAT Software Technical Publications department at techpubs@heatsoftware.com to tell us what you like best, what you like least, and to report any inaccuracies. 3

Chapter 0: Title Page Contents Contents 4 Installation 5 Install Overview 6 System Requirements 8 Adding Reporting Services to Your EMSS Database 11 Configuring SQL Reporting Services for HRS 15 Linking the Reporting Manager URL to the EMSS Console 27 Downloading HRS 30 Creating a Reporting Services Solution 33 Adding EMSS Administrators 46 Hiding Pass-Through Reports 49 4

Chapter 1 Installation This chapter includes all of the requirements and step-by-step procedures necessary for installing HEAT Reporting Services. Here s a little background on our product. HEAT Reporting Services (HRS) is a collection of reports that provide: Centralized visibility of IT assets The security posture of the EMSS endpoint environment These reports are accessible online. Executives, managers, administrators, and other end users can view these reports, which feature: Digital dashboards Informative charts and graphs Up-to-the-minute updates. Powered by Microsoft SQL Server Reporting Services (SSRS), HRS provides: Ready-to-use tools and service that you can use to create, deploy, and manage reports for your organization Programming features that you can use to extend and customize report functionality Any feedback regarding this document should be sent to TechnicalPublicationsTeam@heatsoftware.com. 5

Chapter 1: Installation Install Overview Before you begin installation, look this document over. From a high-level, it lists each requirement and procedure needed to successfully install HEAT Reporting Services (HRS). System Requirements 1 HEAT Reporting Services is a product that uses multiple third-party software applications. You should review the hardware and software requirements to minimize troubleshooting. Plan to succeed! Adding Reporting Services to Your EMSS Database 2 When you setup EMSS, you installed a SQL Server Database, but you didn't configure it for reporting. That's what you'll be doing here. Open the SQL Server installation files and configure SQL Reporting Services so that you have a host for your reports. Configuring SQL Reporting Services for HRS 3 Next, configure your Reporting Services. During this config, you'll create a Webservice URL and a Website URL needed to view your reports. Linking the Reporting Manager URL to the EMSS Console 4 After you've configured reporting services, we need to link to the Reporting Manager URL within the EMSS console for convenience (you'll be able to access the reports using the EMSS console rather than remembering the URL). 6

Install Overview Downloading HRS 5 Although these reports are created using Microsoft technologies, they still require access to EMSS data so that the reports can reference metrics about your EMSS environment. We provide a.zip file full of SQL projects and reports that configure this access for you. Download it from our customer portal. Creating a Reporting Services Solution 6 Use SQL Server Data Tools for Visual Studio to create a reports solution. You'll use this solution to deploy the projects provided in HEAT Reporting Services. This deployment quickly adds HRS reports to your Reports URL that you set up earlier. Adding EMSS Administrators 7 You ve set up Reporting Services, but more people than just you likely need access to the reports. We recommend adding the user group PLUS Admins to the Reporting Services website settings to that all your EMSS Admins can access the reports. Hiding Pass-Through Reports 8 Some of the reports included in HEAT Reporting Services aren't intended for viewing. Instead, their purpose is to gather data for other reports. You should hide these pass-through reports so that all your other reports function as intended. 7

Chapter 1: Installation System Requirements Hardware The hardware requirements for HEAT Reporting Services (HRS) are identical to the HEAT Endpoint Management and Security Suite (EMSS) System Requirements. Software You're going to need some specific software as well. HEAT Endpoint Management and Security Suite HRS requires an EMSS Server that's up and running before you can begin HRS installation. HRS is supported with the following versions of EMSS: Supported EMSS Servers HEAT EMSS 8.4 1 HEAT EMSS 8.3 Microsoft SQL Server The versions of Microsoft SQL Server that are compatible with HRS are listed in the following table. Supported Database Servers Microsoft SQL Server 2014 with Reporting Services (x86 / x64) 2 Microsoft SQL Server 2012 with Reporting Services (x86 / x64) 1Recommended version 2Recommended version 8

System Requirements Supported Database Servers Microsoft SQL Server 2008 R2 with Reporting Services (x86 / x64) You can either: Use the same database that your EMSS Server is already using. 1 Create a new database installation. EMSS Servers running SQL versions lower than 2008 R2 must upgrade to a supported version before HRS can be installed. For additional information on supported upgrade paths, visit http://msdn.microsoft.com/en- US/library/bb677622(v=sql.105).aspx. SQL Server: Reporting Services Feature HRS also requires that you add the Reporting Services feature to your EMSS database (we have a procedure that walks you through this process later in the guide). SQL Server Data Tools - Business Intelligence Install the version of SQL Server Data Tool - Business Intelligence (SSDT-BI) that is compatible with your EMSS SQL Server database. You can download the tool and verify SSDT-BI/SQL version compatibility here. Microsoft's SSDT-BI download page can be a little confusing, so make sure you get the version that's compatible with your database. The versions of SQL and SSDT-BI that are compatible won't necessarily match up, so be careful! 1Recommended. Reusing the EMSS database makes Reporting Services configuration much easier). 9

Chapter 1: Installation Microsoft Visual Studio Microsoft Visual Studio is required to run SQL Server Data Tools - Business Intelligence. However, the SQL Server Data Tools - Business Intelligence installer will install Visual Studio for you you do not need to install Visual Studio independently. 10

Adding Reporting Services to Your EMSS Database Adding Reporting Services to Your EMSS Database When you setup EMSS, you installed a SQL Server Database, but you didn't configure it for reporting. That's what you'll be doing here. Open the SQL Server installation files and configure SQL Reporting Services so that you have a host for your reports. 1. Open the SQL Server Installation Center (which you can open by running Setup from your SQL Server installation folder). Select the Installation link. To open SQL Server Installation Center, search for the installation files on your server. The installation files will be named en_sql_server_2014_ enertrise_edition_x64 or something similar (according to SQL version and edition). If you can't find the install files, you may need to re-download them from Microsoft. 11

Chapter 1: Installation 2. Select the link for adding SQL features. The SQL Server 2014 Setup wizard opens. 3. Click Next to advance through the wizard pages until the Installation Type page opens. If you receive Error 0x8024407 while completing the wizard, don't worry about it. It won't affect your install. Just click Next. 12

Adding Reporting Services to Your EMSS Database 4. Select the Add features to an existing instance option and then select your EMSS database instance (usually UPC). 5. Advance to the Feature Selection page. Makes sure the following features are selected: Reporting Services Native Management Tools Basic 13

Chapter 1: Installation 6. Advance to the Reporting Services Configuration page. Select the option to install reporting services, but not configure it. This option is titled differently for each version of SQL Server. Make sure you are only installing and not configuring. 7. Advance through the rest of the wizard and complete feature installation. Close SQL Server Setup wizard and SQL Server Installation Center when installation is complete. After you finish: SQL Server Reporting Services are installed. Next, you need to configure reporting services so that they'll work with HEAT Reporting Services. Continue to the next procedure. 14

Configuring SQL Reporting Services for HRS Configuring SQL Reporting Services for HRS When you setup EMSS, you installed a SQL Server Database, but you didn't configure it for reporting. That's what you'll be doing here. Open the SQL Server installation files and configure SQL Reporting Services so that you have a host for your reports. 1. Open Reporting Services Configuration Manager using the start page or start menu. Connect to your Reporting Services database instance (UPC usually). 15

Chapter 1: Installation 2. If the server is stopped, click Start. 16

Configuring SQL Reporting Services for HRS 3. Select the Service Account tab. Select an account to sign into the reporting service. Click Apply if necessary. HEAT Software and Microsoft recommend using either the Network Service account or a domain account. Using a local account may cause complications if your EMSS Server and EMSS Database are on different servers. You'll never use this account to sign into anything. It's only used to operate HEAT Reporting Services. 17

Chapter 1: Installation 4. Change the Virtual Directory text to ReportServer. Click Apply, and then click the Report Server Web Service URL link that s created to make sure that it functions. Make sure you click Apply before continuing, or the Web Service URL won't get created. 18

Configuring SQL Reporting Services for HRS 5. Create a new database that your report server uses to store data (a process that's completed from the Report Server Database Configuration Wizard). a. Select the Database tab. Click Change Database. The Report Server Database Configuration Wizard opens. b. Leave Create a new report server database selected. Click Next. You can also use an existing database, although in our example, we're only showing you how to create a new one. 19

Chapter 1: Installation c. Connect to your EMSS Database. If your EMSS Database is a named instance, append the instance name to the Server Name (for example: AGT-12RS064\UPC). If your EMSS Database is the default instance, omit the instance name from the Server Name (for example: AGT-12RS064 rather than AGT- 12RS064\MSSQLSERVER). Advance after testing the connection. 20

Configuring SQL Reporting Services for HRS d. Name your reporting database (this database will be created within your EMSS database instance). We recommend using the default values. Click Next. e. Select the credentials that will be used to authenticate with your reporting services database. f. Click Next and review the Summary tab. Make sure the settings are correct before proceeding. 21

Chapter 1: Installation g. Click Next to proceed with the Install. Click Finish when the install completes. Result: The Report Server Database Configuration Wizard closes. You return to the Reporting Services Configuration Manager. 6. Select the Report Manager URL tab. 22

Configuring SQL Reporting Services for HRS 7. Edit the Virtual Directory to a value of Reports. HRS reports are configured to use this value, so don't use any other value. 23

Chapter 1: Installation 8. Click Apply to activate the URL. Make sure you click Apply before continuing, or the Report Manager URL won't get created. Result: A link displays on the page. 24

Configuring SQL Reporting Services for HRS 9. Click the link to access the Report Manager Website. Result: The URL opens in a new Web browser window. 10. Minimize the Web browser. You'll need it during the next procedure. 25

Chapter 1: Installation 11. Optional: Configure the reporting services E-Mail Settings. E-mail Settings is only available on a fully licensed version of SQL Server. These settings are not available in the Express editions. a. Select the E-Mail Settings tab. b. Make your configurations. For more information, see Microsoft Technet. 12. Click Exit to close Reporting Services Configuration Manager. Reporting Services are configured. After you finish: SQL Server Reporting Services is configured to work with HEAT Reporting Services. Now you can move on to downloading HEAT Reporting Services from the Customer Portal. Continue to the next procedure. 26

Linking the Reporting Manager URL to the EMSS Console Linking the Reporting Manager URL to the EMSS Console After you've configured reporting services, we need to link to the Reporting Manager URL within the EMSS console for convenience (you'll be able to access the reports using the EMSS console rather than remembering the URL). 1. Log in to the EMSS console. From the Navigation Menu, select Tools > Options. 27

Chapter 1: Installation 2. From the General tab, paste the Report Manager URL. Click Save. Copy and paste the URL from the Web browser you minimized in the last procedure. 28

Linking the Reporting Manager URL to the EMSS Console 3. Test that the link to the URL works. First, navigate away from the Options page to any other page in EMSS. Then the EMSS Navigation Menu, select Reports > Enhanced Reports. A new browser tab should open to your Report Manager URL. The link to your reports URL will not work until you navigate away from the Options page. 29

Chapter 1: Installation Downloading HRS Although these reports are created using Microsoft technologies, they still require access to EMSS data so that the reports can reference metrics about your EMSS environment. We provide a.zip file full of SQL projects and reports that configure this access for you. Download it from our customer portal. 1. From your EMSS database server, open a Web browser and log in at HEAT Self- Service Portal (https://support.heatsoftware.com). Use the SelfServiceCustomer role. 30

Downloading HRS 2. Browse to the Releases workspace. 3. Browse to HEAT EMSS > HEAT Reporting Services 8.4. Double-click HEAT Reporting Services 8.4. 4. Click the Downloads button for the geographic location closest to you. 5. Download the HEAT Reporting Services installer (EMSS Enhanced Reports.zip). 6. Extract the contents ofemss Enhanced Reports.zip to any location. 31

Chapter 1: Installation After you finish: You've downloaded and extracted the HEAT Reporting Services. Now you need to create a Visual Studio solution and add the projects from the HEAT Reporting Services.zip file to your new solution. 32

Creating a Reporting Services Solution Creating a Reporting Services Solution Use SQL Server Data Tools for Visual Studio to create a reports solution. You'll use this solution to deploy the projects provided in HEAT Reporting Services. This deployment quickly adds HRS reports to your Reports URL that you set up earlier. Install SQL Server Data Tools - Business Intelligence if you haven't already. You need it to complete this task. 1. Using the Start Screen or Start Menu, search for SQL Server Data Tools. Run as an Administrator. If you're starting SQL Server Data Tools for the first time, select Business 33

Chapter 1: Installation Intelligence Settings and continue. 34

Creating a Reporting Services Solution 2. From the splash screen, start a new project. 35

Chapter 1: Installation 3. From the dialog that opens, select Templates > Business Intelligence > Reporting Services from the tree. Select Report Server Project. 4. Name the project Reporting Services and click OK. 36

Creating a Reporting Services Solution 5. Select File > Add > Existing Project. 6. Browse to the location of HEAT Reporting Services. Before you do this, make sure that the HEAT Reporting Services folder (it should be already from the last procedure, but it's a step that's easy to skip over). If you don't, the folder appears to be empty. 37

Chapter 1: Installation 7. Within the HEAT Reporting Services folder, open the Admin Audit folder. Select the project file and click Open. 38

Creating a Reporting Services Solution 8. Repeat steps 5-7 for each of the following folders in the HEAT Reporting Services folder: AntiVirus Application Control Device Control Patch and Remediation Suite Reports Result: When you're done, Solution Explorer should look like this: 39

Chapter 1: Installation 9. Change the Reporting Services solution properties so that the Reporting Services project doesn't get deployed. a. Right-click the solution name (Reporting Services in this case) and select Properties. b. From the tree, select Configuration Properties > Configuration. 40

Creating a Reporting Services Solution c. For the Reporting Services item, deselect the Build and Deploy check boxes and then click OK. 41

Chapter 1: Installation 10. If either (or both) of the following conditions apply to you, complete the sub steps that follow to update your report data sources: Your EMSS database instance does not have the default name of MSSQLSERVER. Your EMSS database is on a different server than your Reporting Services database. If you meet neither of the conditions above, you don't need to update your report data sources. You can skip forward to Right-click the solution and select Deploy Solution. a. From Solution Explorer, expand to Admin Audit > Shared Data Sources > PLUS.rds. b. Double-click PLUS.rds. 42

Creating a Reporting Services Solution c. Update the Data Source connection string to point toward your EMSS database instance. In our example, the EMSS database instance name is UPC, so we're appending a backslash ( \ ) and UPC to the string. d. Update the connection strings for the STAT.rds and UPC.rds data sources as well. Use the same string as the previous sub step. 43

Chapter 1: Installation e. Repeat these sub steps for remaining projects highlighted below. 44

Creating a Reporting Services Solution 11. Right-click the solution and select Deploy Solution. After you finish: You've deployed the reports. Proceed to Adding EMSS Administrators. 45

Chapter 1: Installation Adding EMSS Administrators You ve set up Reporting Services, but more people than just you likely need access to the reports. We recommend adding the user group PLUS Admins to the Reporting Services website settings to that all your EMSS Admins can access the reports. Log in to your Reports URL if you haven t already. 1. Make sure you re on the Home page. Your view should look like this. If your view doesn t look like this, click the home link that s highlighted. 46

Adding EMSS Administrators 2. Click the Folder Settings button. 3. Click the New Role Assignment button. 47

Chapter 1: Installation 4. Add the PLUS Admins group from your EMSS Server. a. Type your EMSS Server name followed by PLUS Admins. Example: EMSSSERVER\PLUS Admins b. Select the Browser role checkbox. c. Click OK. EMSS Admins can now access the Reporting ServicesURL. Proceed to Hiding Pass- Through Reports. 48

Hiding Pass-Through Reports Hiding Pass-Through Reports Some of the reports included in HEAT Reporting Services aren't intended for viewing. Instead, their purpose is to gather data for other reports. You should hide these passthrough reports so that all your other reports function as intended. 1. Log in to your Reports URL. It's the URL you set up earlier in the EMSS Console. 2. From the Home page, open the Patch and Remediation folder. 49

Chapter 1: Installation 3. For the Endpoint Inventory report, open the report drop-down and select Manage. 4. Select the Hide in tile view checkbox and click Apply. 50

Hiding Pass-Through Reports 5. Repeat steps 2-4 for each of the remaining pass-through reports: Endpoint Patch Detail What Now? Endpoint Patch Status Detail Hardware Inventory Detail By Endpoint Group Installation is complete! You can close the browser window. Your EMSS Admins can view your reports by logging in to the Reporting Services URL (Remember, you can navigate to it by selecting Reports > Enhanced Reports within the EMSS Console. For more help information about general use of HEAT Reporting Services, refer to the HEAT Reporting Services Reports Catalog. 51